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© A control apparatus for an automobile is pro- 
vided with a system manager (1), which initiates and 
manages the operation of units for controlling and 
operating various devices and accessories installed 
in the automobile. The system manager (1) is coup- 
led with a card unit (13), in which a card is inserted. 
Such a card has an identification code of a user and 
a code indicating that the . card is registered in ad- 
vance. The system manager (1) has a list of codes 
of cards registered. If a card inserted is confirmed to 
be correct and valid by the ID and the registration 
code, the system manager (1) executes a predeter- 
mined processing operation and produces a set-up 
•instruction signal. Upon receipt of this set-up instruc- 
tion signal, the control units (19-35) for the devices 
and accessories are initiated. 
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A CONTROL APPARATUS FOR AUTOMOBILES 



BACKGROUND OF THE INVENTION 



Field of the invention 

The present invention relates to a control ap- 
paratus, which is capable of realizing the improved 
and advanced utilization of automobiles. 



Description of the related art 

In a conventional automobile, there is provided 
a key switch in a driver's seat. Various devices 
equipped in an automobile including power train 
control units, such as an engine starter, a fuel 
control device, a transmission control device and 
so on, and accessory control units, such as an air- 
conditioner, a power-driven window device, a car 
radio set, etc., are supplied with electric power to 
be initiated or brought into condition for initiation by 
turning on the key switch by a key. 

If, therefore, several persons use an automobile 
in common, there is the case where the same 
number of keys as that of joint users are needed. If 
plural persons use plural automobiles, the manage- 
ment of keys of those automobiles will become 
much more troublesome. In such a case, there 
exists a further problem that the drive or travel 
characteristics of an automobile may not be always 
suited for preference of every joint user. 

The related art is disclosed, for example, in 
published Japanese patent applications JP-A-62- 
273649 (1987), JP-A-63-26138 (1988) and JP-A-63- 
223901 (1988), and JP-A-60-90947 (1985) referred 
to in the last one. Although the inventions thereof 
have no direct relation with the present invention, 
their disclosure suggests the background of the 
invention and may be available for understanding 
an embodiment of the invention. 



SUMMARY OF THE INVENTION 

An object of the present invention is to provide 
a control apparatus for an automobile, by which 
various devices and accessories installed in the 
automobile can be initiated or brought into the 
condition of initiation by a portable recording me- 
dium, such as a magnetic card, without a conven- 
tional key. 

A feature of the present invention resides in 
that a control apparatus is provided with a system 
manager, for initiating and managing the operation 
of units for controlling and operating various de- 



vices and accessories installed in the automobile, 
which is coupled with an information read/write unit, 
in which a recording medium recorded therein with 
a certain information is inserted, whereby if a re- 

5 cording medium inserted is confirmed to be valid 
and correct, the system manager executes a pre- 
determined processing operation and produces a 
set-up instruction signal for initiating, or bringing 
into the condition of initiation, the devices and 

w accessories. 



BRIEF DESCRIPTION OF THE DRAWINGS 

75 Fig. 1 is a block diagram schematically 

showing a control apparatus for an automobile ac- 
cording to an embodiment of the present invention; 

Fig. 2 shows an example of an arrangement 
of various devices or instruments in a driver's seat 

20 of an automobile to which the present invention is 
applied; 

Fig. 3 shows an example of an allotment of 
storage areas in an internal memory of a system 
manager included in the control apparatus of Fig. 
25 1; 

Figs. 4a and 4b are flow charts illustrating 
the processing operation executed by the system 
manager during a set-up operation of the control 
apparatus of Fig. 1; 

30 Fig. 5 is a flow chart showing a part of the 

processing operation of Fig. 4a further in detail; 

Figs. 6 and 7 are flow charts of two kinds of 
interruption processing operations, which are ini- 
tiated by a user's manipulation or request possibly 

35 occurring during the execution of the processing as 
shown in Figs. 4a (or Fig. 5) and 4b; 

Fig. 8 shows a part of an example of a 
picture of menu employed during the execution of 
the processing as shown in Figs. 4a, 4b and 10; 

40 Figs. 9 and 10 are flow charts illustrating 

processing operations executed by the system 
manager after the set-up operation of the control 
apparatus of Fig. 1; and 

Figs. 11a and 11d are drawings for explain- 

45 ing the status transfer in the operations of the 
various units included in the control apparatus of 
Fig. 1. 

DESCRIPTION OF THE PREFERRED EMBODI- 
50 MENTS 

Referring at first to Fig. 1, there is shown a 
block diagram of a control apparatus for an auto- 
mobile according to an embodiment of the present 
invention. 
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In the figure, reference numeral 1 denotes a 
system manager, which is a main part of the con- 
trol apparatus of the embodiment and constructed 
by a well known microprocessor. Namely, the sys- 
tem manager 1 comprises central processing unit 
(CPU) 3 and internal memory 5 which are coupled 
by internal bus line 6 so as to communicate data 
with each other. The internal bus 6 is coupled with 
interface 7. To the interface 7, there is further 
coupled ten-key device 11, card unit 13 and dis- 
play device 15 through line 9. 

The ten-key device 7 is a usual one capable of 
inputting numerical data. The card unit 13 can read 
data recorded on a card inserted therein by a user 
who is going to drive the automobile, and write 
data supplied from the system manager 1 in the 
card. The data to be recorded on the card includes 
at least a code (ID) for identifying a user and an 
information indicating .that the card is registered in 
advance. 

Further information, which is preferable to be 
recorded in the card, will be described later. Pref- 
erably, the data and information are recorded in the 
card magnetically, however other known types of 
recording media, such as a so-called IC card, can 
be substituted therefor. 

The display device 15 is employed to display 
various guidances or messages issued by the sys- 
tem manager 1 to a user. A user carries out the 
necessary manipulation in accordance with the 
guidances or messages, whereby a desired system 
for an automobile control and accessories can be 
made up dialogically. This display 15 will be called 
a system display, compared with another display 
unit which will be referred to later and used for 
displaying various instruments. 

The interface 7 is further coupled to external 
bus line 17, to which various device control units 
and accessory units are coupled. As shown in Fig. 
1, such units include engine control unit 19, trans- 
mission control unit 21, power-driven steering unit 
23, air conditioner unit 25, sensor unit 27, disk unit 
29, display unit 31, communication unit 33, and 
other various accessory unit such as, for example, 
car radio unit 37. 

There can be some types for such units as 
mentioned above. As a first one of them, each unit 
has a microprocessor including its private mempry 
always storing a program and data necessary for 
execution of the program. The unit can achieve its 
own function autonomously by executing the pro- 
gram, but under the management of the system 
manager 1. For a unit of this type, there can be 
employed a device already known, such as an 
engine control device, an automatic transmission 
control device, etc.. 

In another type of a unit, a private memory of a 
microprocessor does not always store a program to 



be executed by the microprocessor, but the pro- 
gram is loaded in the private memory by the sys- 
tem manager 1 in accordance with the necessity. 
After a program has been once loaded in a private 
5 memory of a unit of this type, the unit functions 
just like the first type of a unit. Since the si2e of 
presently existing programs for an automobile is, 
as a whole, at largest 30 to 40 KBytes, the memory 
5 of the system manager 1 can store all of those 

10 programs sufficiently. 

A further type of a unit has no microprocessor. 
In this type, the system manager 1 stores all of 
necessary programs in its memory 5 and executes 
them to produce instructions to units, and each unit 

rs actuates and controls its control subject in re- 
sponse to an instruction supplied thereto by the 
system manager 1. 

The present invention can be applied to every 
type of the units as mentioned above. In this em- 

20 bodiment, however, it is assumed that the units are 
of the first type as mentioned above. Therefore, 
each unit includes a microprocessor and necessary 
peripheral devices so that it can achieves its own 
function autonomously under the management of 

25 the system manager 1 . 

As already described, a detailed structure and 
architecture of such a unit is already known and 
therefore the further description thereof are omitted 
here. In the following, some of the units as shown 

30 in Fig. 1 will be briefly described with respect to 
only points concerning the present invention. Fur- 
ther, the operating statuses of the units described 
hereinbelow and their relation with the operating 
status of the system manager 1 will be explained in 

35 detail later, referring to Figs. 11a to lid showing 
the status transfer of the operation of the respec- 
tive units. 

At first, the engine control unit 19 has a micro- 
processor with its private memory storing a pro- 

40 gram known in itself for an engine control, and 
achieves various engine control functions, such as 
a fuel injection control, an ignition timing control 
and so on, by executing the stored program. In the 
operation of this unit 19, a response characteristic 

45 against an acceleration pedal depression amount 
and a so-called acceleration correction coefficient 
in the fuel injection or ignition timing control can be 
changed by selecting corresponding constants 
stored in the memory. Thereby, a user can choice 

so the drive characteristic of his automobile from 
among an economic drive, normal drive, sporty 
drive, etc., for example. 

The transmission control unit 21 comprises al- 
most the same components as the unit 19, but a 

55 program stored in an private memory of a micro- 
processor of this unit 21 is of course different 
therefrom. This unit 21 operates in cooperation with 
the unit 19 and carries out the gear shift in accor- 
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dance with the stored program, every time when an 
automobile speed or a rotational speed of an en- 
gine reaches a predetermined value provided in 
advance. Similarly to the case of the unit 19, if the 
above predetermined value is changed, a user can 5 
choice the drive characteristic of his automobile 
from among "economic", "normal", "sporty", etc.. 

In the power steering unit 23, a user can select 
a factor determining the steering characteristic, 
e.g., tight steering (but dull response) or heavy 10 
steering (but sharp response), which is equivalent 
to a gear ratio in a usual, non-powered steering 
device. This is done by changing a corresponding 
constant stored in a private memory of a micropro- 
cessor of this unit 23. The air conditioner unit 25 75 
controls a room temperature of an automobile and 
a blower of an air conditioner in accordance with a 
program stored in a private memory of a micropro- 
cessor of this unit 25 on the basis of a temperature 
and an air capacity set by the ten-key 1 1 through 20 
the system manager 1 . 

The disk unit 29 is a known unit, which can 
write and read an information in or from a floppy 
disk. Such a floppy disk can carry programs neces- 
sary for the various controls of an automobile. 25 
Therefore, a new program for the engine control, 
for example, can be supplied to a private memory 
of the engine control unit 19 from this unit 29 
through the system manager 1. With this, a 
version-up of a program for the engine control can 30 
be easily coped with. 

The display unit 31 selects necessary instru- 
ments from among, for example, a speed meter, a 
tachometer, a fuel gauge, a cooling water tempera- 
ture meter, an engine oil pressure gauge, charging 35 
voltage and current meters, a watch, etc., in accor- 
dance with a user's request, and displays them in 
its display screen. The sensor unit 27 will coop- 
erate with this unit 31 . 

The communication unit 33 carries out the data 40 
transfer between the units. In addition, as shown by 
arrow line 34, it can communicate data by radio 
with external facilities such as a repair service 
station and a navigation service center, under the 
management of the system manager 1. For exam- 45 
pie, the function of a whole system of the control 
apparatus can be diagnosed by receiving a signal 
for diagnosis from a repair service station. Also, a 
user can be guided to his desired location by 
receiving guidances from a navigation service cen- so 
ter. 

Further, the control apparatus shown includes 
units 35 for other accessories such as car radio 
unit 37. The car radio unit 37 carries out the turning 
and the adjustment of the sound volume in re- 55 
sponse to an instruction given by a user through 
the system manager 1. Similarly, other accessory 
units 35 control corresponding accessories under 
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the management of the system manager 1 . 

It is to be noted here that the units as shown in 
Fig. 1 and described above are by way of example 
only. Some of those units may be omitted and/or 
some others may be added. For example, if an 
automobile has no automatic transmission, the 
transmission control unit 21 will be unnecessary. In 
the case of an automobile with a non-powered 
steering device, the power steering unit 23 is not 
needed. If an automobile is equipped with a power 
window device, the other accessory units 35 must 
include a power window control unit. 

Further, it should be noted that, according to 
the present invention, all of units originally installed 
in an automobile may not be made operable, i.e., 
only necessary ones thereof can be made operable 
selectively. 

As will be apparent later, only units which are 
registered in a registration area of the memory 5 of 
the system manager 1 will be made operable. It is 
of course that this registration can be changed at 
an appropriate time point. 

Referring next to Fig. 2, there is shown an 
example of an arrangement of various devices and 
instruments in a driver's seat. In the figure, same 
parts are denoted by the same reference numerals 
as in Fig. 1. 

As shown in Fig. 2, the card unit 13 has slit 39, 
through which a card is inserted, and eject button 
41 for ejecting a card inserted. As will be apparent 
later, when the eject button 41 is pushed, an in- 
terruption signal to the system manager 1 is pro- 
duced, as well as a card is ejected. 

The disk unit 29 has opening 43, through which 
a floppy disk is inserted, indicator 45 turned on 
during the operation of the disk unit 29, and eject 
button 47 for ejecting a floppy disk inserted therein. 

There is provided button switch 49 for a starter 
motor (not shown), which, when pushed, activates 
the starter motor to start the cranking of an engine. 
A key switch 51 is a conventional key switch, which 
is provided as back-up. Therefore, an engine of an 
automobile according to this embodiment can be 
started either by inserting a card in the card unit 13 
or by manipulating the key switch 51 by a key. 

Reference numerals 53 and 55 denote display 
screens of the system display device 15 and the 
display unit 31 , respectively. Push button switch 57 
is a change/register switch, which is, although de- 
scribed in detail later, pushed down when a user 
wants to change units to be used and their speci- 
fications and register them. Reference numeral 59 
denotes a steering wheel. 

Fig. 3 shows an example of the allocation of 
storage in the memory 5 of the system manager 1. 
The storage area shown is divided into three areas 
61, 63, 65. In the area 61, there are stored pro- 
grams relating to the management of a whole sys- 
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tern of a control apparatus, in this figure, there are 
shown four programs as an example; i.e., 
SYS. MGR. CRD, CMNCTN and DSK. The 
SYS.MGR is a program executed by the system 
manager 1 to manage the whole system. This 
program will be described in detail later, with refer- 
ence to flow charts. 

The CRD, CMNCTN and DSK are programs for 
the card unit 13, the communication unit 33 and 
the disk unit 29, respectively. In this embodiment, 
these programs are made to be started at the 
earlier stage of the processing operation of the 
SYS.MGR, and therefore stored in this area 61. 
However, the kinds of programs stored in this area 
greatly depend on the way of the system manage- 
ment. Further, since the contents themselves of the 
CRD, CMNCTN and DSK, i.e., the processing oper- 
ations of the card unit 13, the communication unit 
33 and the disk unit 29, have nothing to do with the 
essence of the present invention, the detailed de- 
scription thereof will be omitted. 

The area 63 of the memory 5 is an area for the 
registration of selected units and their specifica- 
tions. In the example shown, EGNCTR, TRNSCTR, 
PWST and DSP are names of programs for the 
engine control unit 19, the transmission control unit 
21 , the power steering unit 23 and the display unit 
31 and mean that those units are registered. Al- 
though not shown in the figure, each subarea, in 
which an individual unit is registered, further in- 
cludes record parts, in which codes or flags are 
written. As will be apparent from the operation 
described later, such codes or flags indicate wheth- 
er a corresponding unit is to be used or not used 
and the required specifications of the unit. 

The area 65 is an area for storing optional data 
or programs necessary for the system manage- 
ment or the control for an engine or accessories. In 
the figure, there is shown an example that a list of 
codes of registered cards is stored. This is be- 
cause it is assumed in the embodiment that plural 
users have their own cards and commonly use one 
or more automobiles, in this case, rightful users' 
cards are necessary to be registered in control 
apparatus for those automobiles in advance, in 
order to prevent the theft, misuse, etc., for exam- 
ple. 

Referring next to the flow charts of Figs. 4a 
and 4b, the processing operation of the system 
manager 1 will be explained. Further, in these flow 
charts, steps illustrated by a chain line indicate 
steps of the manipulation carried out by a user. 

When a user inserts his card into the card unit 
13, the system manager 1 is powered on and the 
processing operation of these figures starts. After 
start, the program CRD for the card unit 13, which 
is stored in the area 61 of the memory 5, is started 
(step 71 ) and then it is checked whether or not the 
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inserted card is registered and valid (step 72). 

If it is judged at step 72 that the inserted card 
is not registered or valid, a guidance is displayed 
in the system display device 15 (step 73), and the 

s processing operation ends. An example of this 
guidance is "Invalid card. Retry with a valid card, 
or start with a key." At step 72, if it is judged that 
the inserted card is registered and valid, a guid- 
ance such as "Input your identification (ID)" is 

to displayed in the display device 15 (step 74). 

The inputted ID is checked at step 75, and if it 
is judged that the ID is incorrect, a guidance is 
displayed in the system display device 15 (step 
76), and the processing operation ends. An exam- 

15 pie of this guidance is "Incorrect ID. Retry to input 
your ID, or start with a key." At step 75, if it is 
judged that the inputted ID is correct, the program 
CMNCTN for the communication unit 33 is started 
(step 77). 

20 The processing operation until this stage will 

be explained further in detail later, referring to Fig. 
5. Therefore, the further description thereof is omit- 
ted here. 

When the CMNCTN is started at step 77, the 

25 communication unit 33 at first executes the self- 
diagnosis (step 78). If it is judged at step 78 that 
the communication unit 33 is not normal, a guid- 
ance is displayed in the display device 15 (step 
79), and the processing operation ends. This guid- 

30 ance is, for example, "Communication unit is ab- 
normal. Call a service station." 

At step 78, if it is judged that the communica- 
tion unit 33 is normal, it is determined whether or 
not the disk unit 29 is to be used. If a user wants to 

35 substitute a version-upped program of an engine 
control for an old version thereof, he must use the 
disk unit 29 to load such a new program, which is 
supplied by a floppy disk, in a private memory of a 
microprocessor of the engine control unit 19 

40 through the system manager 1 . 

For the aforesaid determination, a question and 
guidance, such as "Use a disk unit ? Input "1", if 
yes and "2", if no, by a ten-key.", is displayed in 
the system display device 15 (step 80). If the disk 

45 unit 29 is unnecessary to be used and therefore a 
user inputs "2" (step 81), then the processing 
operation goes to step 96 (Fig. 4b), which will be 
referred to later. 

If the user selects "1", the program DSK for 

so the disk unit 29 is started (step 82). When the DSK 
is started, the disk unit 29 executes the self-di- 
agnosis (step 83). If it is judged at step 83 that the 
disk unit 29 is abnormal, a guidance is displayed in 
the system display device 15 (step 84). An exam- 

55 pie of this guidance is "Disk unit is abnormal. Use 
an internal memory ? Input "I", if yes and "2", if 
no, by a ten-key." The internal memory in this 
guidance means the memory 5 of the system man- 

5 



9 



EP 0 392 411 A2 



10 



ager 1, and the meaning of the use of the internal 
memory will be apparent later. 

When a user selects "2" at step 85, a guid- 
ance, such as "Call a service station", is displayed 
in the system display device 15 (step 86), and the 
processing operation ends. Otherwise, the process- 
ing operation goes to step 96 (Fig. 4b) through 
step 87 (Fig. 4b), at which the guidance displayed 
at step 84 is cleared. 

Returning to step 83, if it is judged at this step 
that the disk unit 29 is normal, a record of the card 
inserted in the card unit 13 is read (step 88), and 
the read-out record is displayed in the system 
display device 15 (step 89). 

Then, the processing operation goes to steps 
shown in Fig. 4b. At first, it is discriminated wheth- 
er or not units to be used or specifications thereof 
are necessary to be changed. To this end, a guid- 
ance, such as "Change units or their specifications 
? Input "1", if yes and "2", if no, by a ten-key.", is 
displayed in the system display device 15 (step 
90). 

If a user inputs "2" and he selects no-change 
in units to be used and/or their specifications, then 
the processing operation goes to step 96 (Fig. 4b). 
Otherwise, it is discriminated at step 92 whether or 
not an automobile is in the condition of parking. 
This can be discriminated by a signal indicating 
that a shift lever is set at a parking position or that 
an engine is idling or stops. If the automobile is not 
in the condition of parking, the change of units 
and/or their specifications is not allowed. This is 
because the sudden change in the drive char- 
acteristic during travel of an automobile, for exam- 
ple, may be accompanied by danger. 

If the change of the units and/or their specifica- 
tions is not allowed, a guidance is displayed in the 
system display device 15 (step 93). An example of 
this guidance is "Change is not allowed. Bring an 
automobile into a parking condition or use an inter- 
nal memory ? Input "1", if an automobile is 
brought into a parking condition, "2", if you use an 
internal memory, and "3", if you do not use an 
internal memory." 

If a user selects "1" at step 94, the processing 
operation returns to step 92, and the processing 
operation of the loop of steps 92, 93 and 94 is 
repeated until an automobile is brought into the 
parking condition. When the user selects "2", the 
guidance displayed at step 93 is cleared (step 95) 
and the processing operation goes to step 96. 
Further, if he selects "3" at step 94, the processing 
operation ends at once, because the automobile is 
not in the parking condition and therefore the 
change of the then used units and/or their speci- 
fications is not allowed. 

If it is judged at step 92 that an automobile is 
in the parking condition, a guidance is displayed in 



the system display device 15 (step 97). An exam- 
ple of this guidance is "Insert a disk". If a disk is 
inserted in the disk unit 29 (step 98), the registra- 
tion of the units and their specifications in the area 
5 63 of the memory 5 of the system manager 1 is 
carried out in accordance with the card record 
(step 99). Then, a picture of a menu as shown in 
Fig. 8 is displayed in the system display device 
(step 100). 

w A user carries out the change of units to be 

used and their specifications by manipulating the 
ten-key 1 1 in accordance with the displayed menu 
(step 101). By way of example, a first item, i.e., "1 
ENGINE CONTROL UNIT", is at first highlighted. If 
rs the user inputs "1" by the ten-key 11, this means 
that the characteristic of the economic drive is 
selected as a specification for the engine control 
unit 19. That numerical input data is temporarily 
stored in an appropriate portion of the memory 5 

20 and the highlight in the menu is shifted to a second 
item, i.e., "2 POWER STEERING UNIT". 

Then, if the user inputs "1" by the ten-key 11, 
this means that the characteristic of the normal 
steering is selected as a specification for the power 

25 steering unit 23. That numerical input data is also 
stored in the appropriate portion of the memory 5 
and the highlight is shifted to a next item. 

If, referring to the menu picture, the user re- 
peats the manipulation as mentioned above and 

30 completes it with respect to all the items, a guid- 
ance, such as "Push a change/register button, if 
the above is OK." is displayed on a bottom line of 
the menu picture, as shown in Fig. 8. 

Then, if the user pushes the change/register 

35 button switch 57 (Fig. 2), the registration of the 
thus determined units and their specifications is 
renewed in the area 63 of the memory 5 of the 
system manager 1 (step 102), and a guidance such 
as "Renew a card record, too ? Input "1 1 ', if yes 

40 and "2", if no.", is displayed in the system display 
device 15 (step 103). 

If a user inputs "2" at step 104, the processing 
operation goes to step 106 without renewing the 
card record. If he selects "1" at step 104, the 

45 processing operation goes to step 106 after the 
card record is renewed (step 105). The renewal of 
the card record at this step has the following ad- 
vantage. When the user is going to use another 
automobile next time, he can use the another auto- 

50 mobile with the same drive characteristic or acces- 
sories as selected or prepared this time, if he only 
inserts the card in the card unit 13 of the another 
automobile. 

At step 106, there is produced a set-up instruc- 
55 tion signal, by which the selected units are power- 
ed on and programs for those units are renewed in 
accordance with the specifications set at step 101 
(step 107), with the result that those units are 
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brought into the waiting condition from the stop- 
page condition. Thereafter, the processing opera- 
tion of Figs. 4a and 4b ends. 

By the way, the set-up instruction signal is also 
produced at step 96; i.e., when a user selects the 
use of the internal memory 5 at steps 85 and 94, 
and when he does not want to change units to be 
used and their specifications (step 91). In those 
cases, the system of the control apparatus is made 
up in accordance with the contents of the previous 
registration in the area 63 of the memory 5 of the 
system manager 1. 

In the following, the processing operation from 
start to step 77 in Fig. 4a will be described more in 
detail, referring to Fig. 5. 

After start, the system manager 1 is initialized 
and the self-diagnosis of the card unit 1 3 is carried 
out (step 111). Then, it is checked at step 112 
whether or not a card is inserted correctly. If the 
card is not inserted correctly, a guidance, such as 
"Insert a card correctly.", is displayed in the sys- 
tem display device 15 (step 113), and the process- 
ing operation goes to step 114, at which it is 
judged whether or not the card is taken out from 
the card unit 13. The operation of step 114 is 
repeated, until the incorrectly inserted card is taken 
out from the card unit 13. 

If the incorrectly inserted card is taken out, the 
processing operation returns to step 112, passing 
through step 115. This is because step 115 is a 
step which is executed only when a guidance of 
"Invalid card" is displayed, as described later. The 
processing operation as mentioned above is re- 
peated, until the card is inserted correctly. 

When the card is correctly set in the card unit 
13, it is discriminated at step 116 whether or not 
the inserted card is a registered one. This is made 
by comparing a code assigned to the inserted card 
with the list of codes of registered cards, which is 
stored in the memory 5. If the card is not regis- 
tered, the processing operation goes to step 117, 
at which a guidance "Invalid card" is displayed. 
After that, the processing operation goes to step 
114. 

At step 114, the same processing operation as 
described above is carried out, and if the card is 
taken out from the card unit 13, the processing 
operation returns to step 112, after the guidance 
displayed at step 117 is cleared (step 115). There- 
after, the same processing operation as mentioned 
above is conducted, and this loop operation contin- 
ues until the inserted card, which is not registered, 
is taken out and a registered card is inserted. 

If it is judged at step 116 that the inserted card 
is registered, the processing operation goes to step 
118, at which it is discriminated whether or not the 
card is valid. As will be described later, a flag 
indicating "invalid" is recorded in a card, in the 
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case where the card is misused, for example. At 
this step, therefore, the existence of such a flag is 
searched. If it is judged at step 118 that the in- 
serted card is invalid, the processing operation 
5 goes to step 1 1 7 and the same processing opera- 
tion as already described is carried out. 

At step 118, if it is judged that the card is valid, 
a content of a counter, which is provided in a 
private memory of a microprocessor of the card 

10 unit 13, is initialized at "1" (= n) (step 119) and 
thereafter a guidance, such as "Input your ID.", is 
displayed in the system display device 15 (step 
120). If a user inputs his ID (step 121), it is 
checked at step 122 whether or not the inputted ID 

is is correct. As already known, this is done by corn- 
paring the inputted ID with an ID recorded on the 
card in advance. 

If the inputted ID is correct, the operation goes 
to step 77 of the flow chart shown in Fig. 4a. 

20 Otherwise, the content n of the counter is com- 
pared with a predetermined value N, e.g., "3" (step 
123). if n does not exceed N, one is added to n 
(step 124) and then a guidance of "Retry to input 
your ID." is displayed in the system display device 

25 15 (step 125). This loop operation is repeated, until 
a correct ID is inputted. 

At step 123 during this loop operation, it is 
judged that n exceeds N, the processing operation 
goes to step 126, at which a flag indicating 

30 "invalid" is recorded in the card, and the process- 
ing operation ends after a guidance is displayed in 
the system display device 15. An example of this 
guidance is "Every ID inputted is incorrect. You 
can no longer start an automobile with this card." 

35 With this, a theft of an automobile can be pre- 
vented, for example. 

By the way, it can be considered that a user 
manipulates the starter button 49 during the execu- 
tion of the processing operation as shown in Figs. 

40 4a, 4b and 5. As is well known, if a starter motor is 
actuated, the voltage of a power source consider- 
ably decreases, with the result that a malfunction of 
a microprocessor of every unit will be caused. In 
this embodiment, therefore, when a starter motor is 

4$ actuated, an interruption processing operation as 
shown in Fig. 6 is executed. 

When a starter is actuated, there is generated 
a starter signal, which will be referred to later. The 
system manager 1 watches the generation of this 

so starter signal at an appropriate time interval, such 
as 5 msec, and if the starter signal is watched, the 
interruption processing operation is initiated (step 
131). 

If the starter signal occurs, the system rnan- 
55 ager 1 instructs every unit to save an intermediate 
status of the processing operation thereof in its 
private memory, and in every unit, the saving op- 
eration is carried out (step 132). If the starter signal 

7 
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disappears (step 133), the system manager 1 in- 
structs every unit to restore the intermediate status 
saved in its private memory, and in every unit, the 
restoring operation is conducted (step 134). There- 
after, this interruption processing operation ends. 

As already described, at steps 73 and 76 of 
Fig. 4a, a user is alternatively given the guidance 

" or start with a key". Further, there will be a 

case where a user must start an automobile with a 
key for some reasons, in those cases, the process- 
ing operation as shown in Fig. 7 is executed. 

When a user inserts a key into the key switch 
51 and turns it on, a key switch-on signal is gen- 
erated. The system manager 1 watches the gen- 
eration of this signal at an appropriate time interval, 
i.e., 50 msec, and if the generation of the signal is 
watched, the interruption processing operation is 
initiated (step 141). 

When this signal occurs, the system manager 
1 stops the processing operation as shown in Figs. 
4a, 4b and 5 (step 142). Then, ail the guidances 
displayed in the system display device 15 at that 
time are cleared (step 143). Thereafter, the system 
manager 1 executes the processing operation after 
step 77 of Fig. 4a (step 144). Therefore, once the 
control apparatus is set up by a key, the operation 
thereafter is the same as that set-up by a card. 

After the control apparatus is set up, the sys- 
tem manager 1 executes tasks as illustrated by 
flow charts of Figs. 9 and 10. Both tasks are 
executed periodically, but in this embodiment, a 
task shown in Fig. 9 has a higher priority in the 
execution than that shown in Fig. 10. Therefore, the 
former task is executed every 5 msec, and the 
latter task every 50 msec, for example. 

The description will be at first made of the task 
shown by the flow chart of Fig. 9. After start of this 
task, it is watched at step 151 whether or not any 
of the units generates a request for data transfer. If 
such a request is caught, the priority of the request 
is discriminated at step 152, and then the order of 
data transfer is determined in accordance with the 
priority (step 153). The result of the determination 
in step 153 is transferred to the communication unit 
33 (step 154). 

Then, the system manager 1 transfers the right 
to use the bus line 17 to the communication unit 33 
(step 155) and the operation of this figure ends. 
After that, the unit 33 conducts the data transfer 
between corresponding units, using the bus line 7 
and in accordance with the information given from 
the system manager 1. 

Priorities of such requests, i.e., of data trans- 
fers, are arbitrarily determined in advance and 
stored in the memory 5 of the system manager 1 . 
The data transfer between the engine control unit 
19 and the transmission control unit 21, for exam- 
ple, will be given the highest rank of the execution 



priority. Generally, priorities of data transfer be- 
tween accessory units will be lower. 

Next, the processing operation of the task as 
shown by the flow chart of Fig. 10 will be ex- 
5 plained. After start of this task, it is discriminated 
whether or not a card is taken out from the card 
unit 13 (step 161). If the card is taken out, this 
means that a user has an intention to stop the 
operation of an engine, and therefore an engine 

10 stop signal is produced (step 162). 

Otherwise, it is discriminated at step 163 
whether or not any request of a user occurs. Such 
a request is produced by a user's manipulation of 
the change/register button switch 57 (Fig. 2). if 

75 there is no request, the processing operation ends. 
If, however, a user's request is detected to occur, a 
picture of the menu as shown in Fig. 8 is displayed 
in the system display device 15 (step 164). 

In this case, some of items (units) in the menu 

20 picture will be masked, whereby a user can not do 
any manipulation of units corresponding to the 
masked items. For those masked items, there will 
be selected items of such units that the change 
thereof may cause danger, if they are changed 

25 during the travel of an automobile, such as items of 
the engine control unit and the power steering unit, 
for example. 

By way of example, if, when the menu as 
shown in Fig. 8 is displayed (although a part of 

30 which may be masked), and "5 AIR CONDITION- 
ER" is highlighted, a user selects "3. change", a 
program for the air conditioner unit 25 is initiated 
(step 165). Thereafter, the air conditioner unit 25 
starts to execute the program, whereby necessary 

35 guidances are displayed in the system display de- 
vice 15 and the user can dialogically achieve the 
change of the specifications of an air conditioner, 
such as set values of a room temperature and/or 
an air quantity of a blower, for example, in accor- 

40 dance with the displayed guidances. 

In this manner, by the periodic execution of the 
task of Fig. 10, a user's request, including the 
stoppage of the operation of an engine, can be 
watched every 50 msec 

45 Referring next to Figs. 11a to 11 d, the explana- 

tion will be made of the transfer in the status of 
operation of the system manager 1 and the respec- 
tive units, which operate in the manner as de- 
scribed above. 

so Fig. 11a shows the status transfer of the opera- 

tion of the system manager 1, including the card 
unit 13, the disk unit 29 and the communication 33. 
Namely, the status transfer of the operation as 
shown in this figure relates to the units, which 

55 operate in accordance with the programs stored in 
the system management program storing area 61 
of the memory 5. 

Those units, which are in the status of stop- 
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page, are brought into the status of waiting by 
inserting a card. If a user inputs his identification ID 
(cf. step 74 of Fig. 4a) or turns on the key switch 
51 (Fig. 2) by using a key (cf. steps 73 and 76 of 
the same), those units are brought into the status 
of operation and, after execution of the necessary 
steps, the set-up instruction signal A is produced 
(cf. steps 96 and 106 of Fig. 4b). 

If the starter signal B is generated during the 
status of operation of those units, the system man- 
ager 1 executes the interruption processing opera- 
tion as shown in Fig. 6, whereby those units are 
maintained in the status of waiting, until the signal 
B disappears. Further, when the stop signal C is 
generated (cf. step 162 of Fig. 10), those units 
shirts their status to the stoppage from any status 
thereof. 

In Fig. 11b, there is shown the status transfer 
of the operation of the engine control unit 19. This 
unit 19, which is in the status of stoppage, shifts its 
status to the waiting by receiving the set-up in- 
struction signal A produced as above. Usually, the 
engine control unit 19 will be subject to the self- 
diagnosis in this status. If any abnormality is found 
thereby, this unit 19 is shifted to the status of back- 
up. Contents of the back-up depends on an engine 
control unit installed, however they have no direct 
relation with the present invention. 

If a user turns on the starter switch 49 (Fig. 2), 
the starter signal B is generated and the unit 19 is 
brought into the status of start, in which a starter 
motor rotates and an engine is cranked. During this 
state, a cranking signal D is generated. When the 
engine falls into the self-rotation by the cranking, 
the unit 19 is shifted into the status of operation 
and carries out the known engine control. In this 
condition, the unit 19 produces a signal E indicat- 
ing that the engine rotates continuously. 

As is well known, the unit 19 is subject to the 
self-diagnosis also during the operation status. If 
any abnormality is found thereby, the unit 19 is 
shifted to the condition of back-up. Similarly to the 
foregoing, contents of the back-up depends on an 
engine control unit installed. When the engine stall 
occurs and an engine stall signal F is produced, 
the unit 19, which is in the operation status, is 
shifted to the waiting status. Further, if the stop 
signal C is generated, the unit 19 is brought into 
the stoppage, even if it is in any status. 

The status transfer in the operation of the 
transmission control unit 21 and the power steering 
unit 23 is almost the same as that of the engine 
control unit 19, as mentioned above. 

Fig. 11c shows the status transfer of the opera- 
tion of the display unit 31. Namely, the unit 31, 
which is in the condition of stoppage, is shifted to 
the condition of waiting, when the set-up instruction 
signal A occurs. In this status, the unit 31 is subject 



to the self-diagnosis. If any abnormality is found, 
the unit 31 is shifted to the condition of back'-up. 
This back-up depends on a display unit used. 

After the completion of the self-diagnosis, the 

5 unit 31 is shifted to the status of operation and 
carries out the predetermined display operation. 
Also during the status of display operation, the unit 
31 is self-diagnosed periodically. If any abnormality 
is found thereby, the unit 31 is shifted to the back- 

10 up condition. 

When the engine stall signal F occurs, the unit 
31 falls into the status of waiting, even if it is in any 
status. Further, the stop signal C shifts the status of 
the unit 31 to the stoppage, even if it is in any 

75 status. 

Further, most of the accessory units 35 makes 
almost the same status transfer as shown in Fig. 
11c. Although the air conditioner unit 25 belongs to 
one of the accessory units 35, the status transfer of 

20 the operation of the air conditioner unit 25 is shown 
in Fig. 11d t since it is somewhat different from that 
of the remaining accessory units 35. 

Namely, this unit 25 shifts its condition from 
the waiting status to the operation status, only 

25 when the self-rotation signal E occurs. It will be 
understood that this means that an air conditioner 
is operable only when an engine operates steadily. 

As described above, according to the present 
invention, various devices installed in an auto- 

30 mobile, such as power train devices and acces- 
sories, can be activated or brought into the op- 
erable condition by a card, whereby the easy and 
flexible management of automobiles can be re- 
alized especially in the case where plural users use 

35 one or more automobiles in common. 

In such a card, there is recorded an identifica- 
tion code to identify a user. Also, a card has its 
own code particularly assigned, and a control ap- 
paratus of an automobile has a list of codes of 

40 cards acceptable, which are registered in advance. 
With those two measures, an automobile or auto- 
mobiles can be prevented from theft or misuse. 

The present invention has a further advantage 
in such a control apparatus, for an automobile that 

45 is provided with a system manager, which man- 
ages and controls the operation of control units for 
the various devices and accessories, and can se- 
lect some necessary ones from among the control 
units and their specifications. In this case, once a 

so user selects control units to be used and their 
specifications and records them on his card, he 
can always enjoy the same drive characteristic or 
accessories only by using his card, even when he 
use another automobile. 

55 

Claims 
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1. A control apparatus for an automobile having 
a microprocessor control system for executing pre- 
determined processing to control the operation of 
various devices and accessories installed in the 
automobile, 

characterized in that 

said microprocessor control system comprises a 
system manager (1), including a central processing 
unit (3) and a memory (5) coupled with each other, 
which initiates and manages the operation of units 
for controlling and operating the devices and ac- 
cessories and is provided with means for identify- 
ing a user of the automobile and initiating said 
system manager (1) in response to the result of the 
identification. 

2. A control apparatus according to claim 1, 
wherein said identifying means comprises an in- 
formation read/write unit, in which a recording me- 
dium with information recorded therein is inserted, 
and said system manager (1) is initiated, only if a 
recording medium inserted by a user is judged to 
be valid and correct on the basis of the recorded 
information. 

3. A control apparatus according to claim 2, 
wherein the information recorded in a recording 
medium includes a code particularly assigned the 
recording medium and a list of codes of recording 
media registered in advance is provided, wherein 
when a recording medium is inserted in the in- 
formation read/write unit (13), it is judged by refer- 
ring to the code list whether or not the recording 
medium inserted is a registered one, and wherein 
said system manager (1) is initiated, only if the 
recording medium is judged to be registered. 

4. A control apparatus according to claim 2, 
wherein said system manager (1) is provided with 
means (11) capable of inputting at least code data 
and the information recorded in a recording me- 
dium includes an identification code, which is as- 
signed to an individual user using the recording 
medium, and wherein said system manager (1) is 
initiated, if an identification code inputted by a user 
is coincident with the identification code recorded 
in a recording medium inserted in the information 
read/write unit. 

5. A control apparatus according to claim 4, 
wherein when a user inserts a recording medium in 
the information read/write unit (13) and can not 
input a correct identification code within a predeter- 
mined number of times of trying to input the iden- 
tification code, a code or flag indicating an invalid 
card is recorded in the recording medium, whereby 
said system manager (1) can no longer be initiated 
with the recording medium. 

6. A control apparatus according to claim 3, 
wherein said system manager (1) is further pro- 
vided with means (11) capable of inputting at least 
code data and the information recorded in a re- 
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cording medium includes an identification code, 
which is assigned to an individual user using the 
recording medium, and wherein said system man- 
ager is initiated, only if a recording medium in- 

5 serted is judged to be registered and an identifica- 
tion code inputted by a user is coincident with the 
identification code recorded in a recording medium 
inserted in the information read/write unit (13). 

7. A control apparatus according to claim 2, 

10 wherein a user can select control units, which are 
desired to use by the user, from among the control 
units installed in the automobile in advance by the 
user's own manipulation in accordance with guid- 
ances displayed on a display device (15) by the 

75 system manager (1), and wherein the thus selected 
control units are registered in the memory (5) of 
the system manager (1) in order to make those 
control units operable and recorded by the informa- 
tion read/write unit (13) in the recording medium. 

20 8. A control apparatus according to claim 7, 

wherein when the user selects the control units to 
be used, the specifications of the selected control 
units can be determined, which are recorded by 
the information read/write unit (13) in the recording 

25 medium together with the selected control units. 

9. A control apparatus according to claim 8, 
wherein the registration and change of control units 
to be used and their specifications are allowed only 
during a certain condition of the automobile. 

30 10. A control apparatus according to claim 9, 

wherein the registration and change of control units 
and their specifications, which directly relates to 
the travel of the automobile, such as an engine 
control unit (19), a transmission control unit (21) 

35 and a power steering unit (23), is not allowed 
during the automobile travels. 

11. A control apparatus according to claim 10, 
wherein when the automobile travels, part of the 
guidances displayed on the display device (15), 

40 which concerns the change of the units and their 
specifications directly relating to the travel of the 
automobile, is masked. 

12. A control apparatus according to claim 7, 
wherein the control units installed in the automobile 

45 includes a disk unit (29), in which a floppy disk can 
be inserted, and, when the disk unit (29) is regis- 
tered in the system manager (1), the alteration of 
programs for the devices and accessories can be 
carried out by the floppy disk. 

50 
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© A control apparatus for an automobile is pro- 
vided with a system manager (1), which initiates and 
manages the operation of units for controlling and 
operating various devices and accessories installed 
in the automobile. The system manager (1) is coup- 
led with a card unit (13), in which a card is inserted. 
Such a card has an identification code of a user and 
a code indicating that the card is registered in ad- 
vance. The system manager (1) has a list of codes 
of cards registered. If a card inserted is confirmed to 
be correct and valid by the ID and the registration 
code, the system manager (1) executes a predeter- 
mined processing operation and produces a set-up 
instruction signal. Upon receipt of this set-up instruc- 
tion signal, the control units (19-35) for the devices 
and accessories are initiated. 
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